TI-2018-11086 Aliases CVE-2018-15540 GHSA-q25r-c7f9-q7c3

Agentejo Cockpit performs actions on files without appropriate validation and therefore…

MEDIUM 46CWE-22Published 2018-10-15 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Agentejo Cockpit performs actions on files without appropriate validation and therefore allows an attacker to traverse the file system to unintended locations and/or access arbitrary files, aka /media/api Directory Traversal.

Why it matters now

EPSS 0.02259 83rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:agentejo:cockpit:-:::::::*	not specified by NVD	Vulnerable	cockpit-hq

cpe:2.3:a:agentejo:cockpit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·cockpit-hq

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-15540
2026-10-03 Alias added: GHSA-q25r-c7f9-q7c3

References

Exploit 1

20181011 Cockpit CMS Multiple Vulnerabilities (CVE-2018-15538, CVE-2018-15539, CVE-2018-15540)

TI-2020-18291 Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. CVSS 3.1CRITICAL 9.8
TI-2020-18290 Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. CVSS 3.1CRITICAL 9.8
TI-2022-02511 Insufficient Session Expiration in cockpit-hq/cockpit CVSS 3.1CRITICAL 9.8
TI-2020-18292 Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. CVSS 3.1CRITICAL 9.8
TI-2023-19207 A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows… CVSS 3.1HIGH 8.8
TI-2023-01240 Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit CVSS 3.1HIGH 8.8

See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences